$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143279.roa File: AS143279.roa (raw, json) Hash identifier: FjdLdkG0XupVx3s6BtzptlJr7Kjd/sf3hMHESQH2Nz0= Subject key identifier: 50:00:08:0C:19:FB:BD:C1:BB:F7:45:71:F2:5F:77:8C:AE:E0:0A:28 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 33FB7079155A13999F4670A682C19D41559F7571 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143279.roa Signing time: Wed 04 Mar 2026 06:06:02 +0000 ROA not before: Wed 04 Mar 2026 06:01:02 +0000 ROA not after: Wed 03 Mar 2027 06:06:02 +0000 asID: 143279 IP address blocks: 240a:a275::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fb:70:79:15:5a:13:99:9f:46:70:a6:82:c1:9d:41:55:9f:75:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:01:02 2026 GMT Not After : Mar 3 06:06:02 2027 GMT Subject: CN=5000080C19FBBDC1BBF74571F25F778CAEE00A28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:97:14:dd:38:36:d9:f0:23:6e:c1:b3:3d: d4:40:1f:51:ba:75:63:31:df:6a:5e:a4:a0:e9:e2: 66:71:0a:b0:c0:0b:44:84:18:f8:4a:6c:4b:2f:c3: f9:5b:fb:0f:7c:e5:3a:b0:4b:7f:b4:81:41:26:4c: 7a:a4:da:87:2e:c6:8a:6f:b3:b9:a8:f9:ec:0c:73: d4:dd:77:a9:2e:64:3b:4d:26:52:d2:a5:7c:ae:b2: 83:dc:e6:72:e1:0a:98:62:aa:d5:5d:51:74:d2:e2: 15:9a:d4:95:d7:3b:2a:d6:7e:15:5d:ee:f5:75:b4: 28:de:be:b3:ca:d0:c4:60:0f:f3:df:e6:b2:1c:36: 81:74:af:d9:97:06:d5:80:17:f1:00:08:e8:89:73: d0:37:af:80:1f:ed:0f:04:77:2a:8e:80:25:e0:2b: 81:f2:b6:65:2a:5e:d1:80:0f:b4:31:cc:d1:c2:89: 8a:3f:7a:64:f2:7c:93:b6:8d:57:0b:34:0d:35:b3: 5c:f2:c9:a4:e3:d4:f2:a6:90:91:bc:8d:86:08:79: 25:b2:8c:ff:7c:ce:a3:33:e0:cb:f4:bf:c9:5c:82: f1:d7:a3:e0:d6:ea:39:7f:a2:75:44:62:d7:be:e9: bd:6f:f6:e9:d7:59:06:27:fc:a5:87:bf:f8:79:f4: f3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:00:08:0C:19:FB:BD:C1:BB:F7:45:71:F2:5F:77:8C:AE:E0:0A:28 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143279.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a275::/32 Signature Algorithm: sha256WithRSAEncryption 12:9e:f9:11:11:2c:f7:3b:9b:7a:03:d8:03:82:c1:55:48:38: 49:19:40:f1:26:7b:e8:45:28:03:b9:9b:9b:62:f7:9b:ad:f5: 9d:b0:ab:90:af:d3:b3:25:94:6a:05:46:59:b0:b6:18:64:3e: b0:97:c9:92:98:cd:22:92:08:3a:fe:48:c3:84:24:7c:3e:0e: 86:8a:a0:11:e7:20:4a:7b:0a:7d:64:57:d2:d2:8c:28:ab:16: 2c:1c:41:1b:8a:e9:a1:89:f0:f2:f4:6b:f7:7e:c6:47:84:03: 98:73:d5:a5:89:78:2a:e1:35:c0:90:0e:44:e2:99:ab:a5:68: cd:63:63:53:97:fd:71:d8:05:c8:71:c2:73:e2:6b:89:de:3b: 2b:be:9c:c0:c8:24:98:d5:42:58:45:4f:1b:72:93:e2:e5:db: d3:d6:b6:9f:b0:60:fd:be:de:88:ca:14:3d:70:1e:02:fe:3e: e1:5c:67:d9:00:74:7a:59:da:d5:97:72:4c:3a:a4:18:4c:6b: d5:57:e8:34:4c:39:26:76:e2:2a:a6:dd:1b:08:3f:e1:51:a8: 34:57:1e:55:22:24:83:dd:84:da:ed:8b:3f:53:c0:b1:c7:fb: 9f:78:f9:ec:9b:11:23:fc:03:4e:07:c2:25:c1:77:db:4f:a9: 1a:ad:9b:9c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUM/tweRVaE5mfRnCmgsGdQVWfdXEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDEwMloX DTI3MDMwMzA2MDYwMlowMzExMC8GA1UEAxMoNTAwMDA4MEMxOUZCQkRDMUJCRjc0 NTcxRjI1Rjc3OENBRUUwMEEyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9FlxTdODbZ8CNuwbM91EAfUbp1YzHfal6koOniZnEKsMALRIQY+EpsSy/D +Vv7D3zlOrBLf7SBQSZMeqTahy7Gim+zuaj57Axz1N13qS5kO00mUtKlfK6yg9zm cuEKmGKq1V1RdNLiFZrUldc7KtZ+FV3u9XW0KN6+s8rQxGAP89/mshw2gXSv2ZcG 1YAX8QAI6Ilz0DevgB/tDwR3Ko6AJeArgfK2ZSpe0YAPtDHM0cKJij96ZPJ8k7aN Vws0DTWzXPLJpOPU8qaQkbyNhgh5JbKM/3zOozPgy/S/yVyC8dej4NbqOX+idURi 177pvW/26ddZBif8pYe/+Hn0868CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBRQAAgM Gfu9wbv3RXHyX3eMruAKKDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzI3OS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK onUwDQYJKoZIhvcNAQELBQADggEBABKe+RERLPc7m3oD2AOCwVVIOEkZQPEme+hF KAO5m5ti95ut9Z2wq5Cv07MllGoFRlmwthhkPrCXyZKYzSKSCDr+SMOEJHw+DoaK oBHnIEp7Cn1kV9LSjCirFiwcQRuK6aGJ8PL0a/d+xkeEA5hz1aWJeCrhNcCQDkTi maulaM1jY1OX/XHYBchxwnPia4neOyu+nMDIJJjVQlhFTxtyk+Ll29PWtp+wYP2+ 3ojKFD1wHgL+PuFcZ9kAdHpZ2tWXckw6pBhMa9VX6DRMOSZ24iqm3RsIP+FRqDRX HlUiJIPdhNrtiz9TwLHH+594+eybESP8A04HwiXBd9tPqRqtm5w= -----END CERTIFICATE-----Generated at Sat Mar 28 11:45:28 2026 by rpki-client